[Secure-testing-team] Bug#820526: giflib: CVE-2016-3977: gif2rgb: heap buffer overflow

[Salvatore Bonaccorso]

Source: giflib
Version: 4.1.6-10
Severity: important
Tags: security upstream patch fixed-upstream
Forwarded: https://sourceforge.net/p/giflib/bugs/87/

Hi,

the following vulnerability was published for giflib.

CVE-2016-3977[0]:
gif2rgb: heap buffer overflow

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-3977
[1] https://sourceforge.net/p/giflib/bugs/87/
[2] https://sourceforge.net/p/giflib/code/ci/ea8dbc5786862a3e16a5acfa3d24e2c2f608cd88/

Regards,
Salvatore